Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/qTBKuXrMd7XLtQiqUfmYTbV0cXw.roa
File:                     qTBKuXrMd7XLtQiqUfmYTbV0cXw.roa (raw, json)
Hash identifier:          AGYgB26zdYDExNCMKB1Sk+TLZC3itvMITHqWkeGpeU4=
Subject key identifier:   A9:30:4A:B9:7A:CC:77:B5:CB:B5:08:AA:51:F9:98:4D:B5:74:71:7C
Certificate issuer:       /CN=bc3a4697447d190308644a58bceaa124c074b7e1
Certificate serial:       019424B3E39E262452F9E4274809792F49E1
Authority key identifier: BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/qTBKuXrMd7XLtQiqUfmYTbV0cXw.roa
Signing time:             Thu 02 Jan 2025 01:49:16 +0000
ROA not before:           Thu 02 Jan 2025 01:49:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209766
IP address blocks:        192.145.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:e3:9e:26:24:52:f9:e4:27:48:09:79:2f:49:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3a4697447d190308644a58bceaa124c074b7e1
        Validity
            Not Before: Jan  2 01:49:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a9304ab97acc77b5cbb508aa51f9984db574717c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:37:75:18:26:bc:7d:9c:f8:ec:f8:95:39:4f:
                    df:c4:bb:d5:d7:a2:80:6b:99:5b:90:73:b0:01:96:
                    25:99:75:36:9b:25:10:77:a3:6b:b2:3e:b8:e7:1f:
                    e6:cb:dd:ad:5c:66:23:64:e0:85:de:dd:e8:e1:81:
                    00:21:de:de:9d:16:70:1f:8c:7b:f1:d0:4b:e8:f0:
                    f7:a2:d0:c4:54:e7:60:29:16:28:b0:9f:50:4a:88:
                    60:80:ca:3b:29:fa:c2:14:6c:dd:45:ba:3a:70:e2:
                    2e:07:ac:d7:38:74:c6:cc:8e:c8:7b:bd:26:b6:62:
                    c0:9c:4d:da:59:88:ea:c5:90:59:b1:22:69:6a:19:
                    63:65:63:98:a1:1a:25:2b:17:e7:3e:09:bc:7a:8d:
                    6f:95:ea:36:ce:a4:5b:b3:eb:0f:15:66:8d:e9:ba:
                    a3:ea:4c:55:54:79:9c:bc:b1:1f:a5:ce:d0:81:bb:
                    6b:37:d8:ab:36:2c:d3:d6:c9:ae:c9:76:92:f6:da:
                    79:c1:03:41:b6:19:d7:b1:d7:f8:8b:c4:8f:0a:e5:
                    68:f7:f7:71:e2:9c:d4:be:d4:4f:64:27:2b:11:2a:
                    63:19:f1:6f:f7:2f:df:68:b0:06:97:3e:ad:80:95:
                    72:64:92:a5:21:51:04:72:2c:81:6f:18:2a:78:f5:
                    bd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:30:4A:B9:7A:CC:77:B5:CB:B5:08:AA:51:F9:98:4D:B5:74:71:7C
            X509v3 Authority Key Identifier:
                keyid:BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/qTBKuXrMd7XLtQiqUfmYTbV0cXw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:da:af:00:70:aa:25:96:9c:b0:89:3f:1b:01:92:98:32:f1:
         71:49:28:61:6e:4d:40:38:c3:32:aa:56:4f:f9:17:5d:63:8e:
         d0:37:c3:b6:84:36:51:65:96:02:33:1e:6e:77:ee:68:1a:33:
         62:97:f8:23:27:e2:19:fb:29:cb:cf:a1:a2:4a:62:09:95:53:
         34:5a:66:8c:83:d8:18:43:65:b6:d3:a7:0c:16:5d:3f:5b:14:
         80:41:79:be:48:16:36:9c:26:3f:cd:c8:42:f7:9a:6c:0d:61:
         fb:4b:d0:3d:82:d9:a1:b0:9d:c1:72:9f:8d:63:77:49:4c:88:
         6f:8d:dd:c2:c5:0a:e3:8a:bf:83:11:e3:fc:60:38:42:31:35:
         d4:0c:90:a6:91:5c:39:31:6c:aa:e5:52:a1:34:7c:b0:a9:dc:
         54:cd:c3:81:11:12:09:95:83:af:15:d3:83:50:b6:39:d0:3c:
         4d:90:3e:cd:36:90:2b:e1:e0:d0:26:48:61:b1:eb:e6:38:1f:
         2d:d8:5f:38:ff:d4:04:9d:5d:6c:ee:32:bc:17:7b:25:42:13:
         4d:ab:fb:ac:27:d4:6e:8a:59:e7:aa:19:26:fb:03:c1:28:e4:
         6a:43:6e:10:20:c7:b7:5d:30:6c:01:5d:0c:bc:11:11:2b:fc:
         6d:77:6b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----